English
Skip to content
ToolAcrev2.4
person
Zero Server Telemetry memory 100% In-Browser Computation verified Air-Gapped Verifiable
security Canonical Reference • Route: /privacy/ • Re-audit: ISO/IEC 27001-Aligned

Privacy Policy & Zero-Egress Data Guarantee

Verifiable mathematical and architectural guarantees. We do not collect, process, inspect, store, or transmit your files, keystrokes, text inputs, or memory payload metadata to any remote cloud endpoint.

Effective Date: January 1, 2025 • Specification: Zero-Egress Spec v2.4.2 • Audited Sandbox: Chromium V8 / WebAssembly

Client Audit Snapshot

Live Monitor
speed Hardware Isolation Active
Observed Requests 0 Entries Probe Not Run
Cross-Origin Entries 0 Observed Browser-Visible Only
CSP Status Not Inspected Response Header Check
Evidence Retention Tab-Scoped Discarded on Exit
terminal Enforced HTTP Header Content-Security-Policy Inspect deployed response 
[READY] Run the browser audit to inspect the deployed Content-Security-Policy response header and report its effective connect-src directive.

Content Security Policy is deployment evidence. Run the browser audit to read the current document response and report the effective connection directive without inferring network silence.

terminal Article 01

Fundamental Principle of Zero Server Transmission

ToolAcre operates on a non-custodial compute architecture. When utilizing developer utilities—such as JSON Formatter, Base64 Decoder, Hash Generators (SHA-256, Keccak, MD5), RSA Key Generators, RegEx Analyzers, and Document Processors—100% of mathematical transformations occur strictly inside your local browser thread or WebWorker virtual instance.

airplanemode_active
Air-Gap Operational Verification

You can turn off Wi-Fi, sever your Ethernet connection, or enable Airplane Mode after initial page hydration. Every processing engine will execute without degradation, proving zero cloud dependencies.

memory Article 02

File Ingestion & Ephemeral Memory Lifecycle

When dragging or selecting files (such as SVGs, PDFs, binaries, certificates, or video tracks), the application provisions local native memory structures (ArrayBuffer, Uint8Array, and BlobURL) directly inside the sandboxed Chromium/WebKit heap.

1. Allocation Buffers are allocated via FileReader() with explicit local scope bounds.
2. Zeroing Out On click of "Reset Buffer", buffers undergo explicit overwrite with zeros before garbage collection.
3. Destruction Closing the active browser tab permanently destroys the ephemeral process thread and memory heap.
ad_units Article 03

Third-Party Advertising & Google AdSense Compliance

ToolAcre uses non-intrusive sponsor blocks via Google AdSense to fund ongoing open-source engineering. In strict accordance with the Google Publisher Policies and privacy-first web utility principles:

  • check_circle No Cross-Domain Fingerprinting: Ad scripts run in isolated sandboxed contexts and have no DOM access to your payload textareas, files, or decrypted strings.
  • check_circle Contextual Placement Isolation: Sponsors are clearly separated by explicit borders and prominent "ADVERTISEMENT" labels to avoid navigational confusion.
  • check_circle Non-Personalized Delivery Defaults: We enforce consent checks where required by GDPR/ePrivacy directives before requesting non-personalized ad assets.
wifi_tethering Article 04

Network-Dependent Utilities Exception Disclosures

While 42 of 43 registered tools are configured for local processing, a limited set of specialized tools intrinsically require external network transport to fulfill their core utility function:

Media Downloader & Streaming Parser Network Call Active

Direct requests are dispatched to resolve media stream protocols (m3u8, mpd). Zero intermediate file chunks are cached or retained on any proxy server. Streams are assembled in-memory on the client via WebCodecs.

YouTube Public oEmbed Metadata Probe Direct API Egress

Queries are routed directly to public endpoints (youtube.com/oembed) without user IP masking or backend telemetry interception. Zero search query logs are kept.

gavel Article 05

Compliance with Global Standards: GDPR, HIPAA, & CCPA

GDPR Art. 25 Data Protection by Design

By never ingesting Personal Identifiable Information (PII) on a server, ToolAcre eliminates the concept of server-side data processing and storage risks.

HIPAA Compliant Safe for Healthcare Data

Protected Health Information (PHI) processed inside air-gapped browser sessions cannot breach network boundaries, maintaining full administrative hygiene.

CCPA / CPRA Exemption via Zero Sale

We do not "sell", "share", or "disclose" consumer personal information because no server ingest infrastructure exists to capture it.

verified_user Article 06

Cryptographic Transparency & Open Source Verification

This page does not claim a Sigstore or Cosign verification that has not been performed. The evidence download records deterministic SHA-256 source hashes and any detached-signature metadata published by the build; external signing and verification remain explicit prerequisites when that metadata is absent.

Detached signature metadata:
Not published for this build. See downloaded evidence.
verified_user
Data Protection Officer Direct Inquiries Cryptographic inquiries: [email protected] (Air-gapped PGP available)